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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address ~ 



Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )I3 Responsive to communication(s) filed on 15 July 2004 . 
2a)S This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quay/e, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) S Claim(s) 1-12.19-21 and 24 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6® Claim(s) 1-12.19-21 and 24 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1. D Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 
Response to Amendment 

1 . Claims 1-26 were pending at the time of the previous Office Action in this 
application. Claims 13-18, 22, 23, 25 and 26 have been cancelled by the latest 
amendment. Therefore claims 1-12, 19-21, and 24 are pending and have been 
examined. 

Response to Arguments 

2. Applicant's arguments filed 7-15-2004 have been fully considered but they are 
not persuasive. 

The Applicant argues that paragraph [0064] of the Dick reference fails to teach 
"organizing a plurality of types of events associated with a firewall of a local computer." 
Yet a careful reading of the cited passage reveals that such organizing activities are 
contemplated as common functions carried out by such firewalls. A reasonably broad 
interpretation of the passage cited does read on the instant invention. 

The Applicant asks for a showing in traverse of the taking of Official Notice in the 
previous Office Action that provision of different viewing options in a graphical user 
interface is old and well known in the art. The applicant's attention is now drawn to 
Krishnaswamy, US 5,867,494, fig. 8 where operation of such a GUI is detailed. 

The applicant argues that blocked attempts are not organized into categories in 
the prior art, yet such is taught by Schlossberg in paragraphs 74-77. 
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The applicant argues that no display of ports, IP addresses, and banned 
applications with blocked access attempts is taught by the prior art, yet such is taught 
by Schlossberg in paragraphs 0043, 0044, and figs. 6-8. 

Claim Rejections - 35 USC § 103 

3. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

4. Claims 1-12, 19-21, and 24 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Dick et al. (2002/0174340), Schlossberg et al. (2002/0066034). 

Claims 1,19, 20, and 24 have been amended via the latest amendment so as to 
incorporate the limitations of claims 13, 16-18, and 25. Claims 1, 19, 20, and 24 are 
therefore rejected as in the previous Office Action under 35 U.S.C. 103(a) as being 
unpatentable over Dick et al. in view of Schlossberg et al. with the addition of the 
grounds of rejections of claims 13, 16-18, and 25. 

In paragraphs 64 and 65 Dick et al. present a firewall that detects threats. They 
also mention levels of attacks, which anticipate an organized categorization of certain 
firewall events. Dick et al. do not specifically say that these threats are represented 
graphically. In paragraphs 74-76, Schlossberg et al. teach graphical displays of threats 
that "facilitate the interaction between the network security operator and the network 
intruder the operator is seeking to defeat." Schlossberg et al. teaches giving recent or 
historical displays. Therefore it would have been obvious to a person of ordinary skill in 
the art at the time the invention was made to implement a graphical threat display, as 
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taught by Schlossberg et al., in Dick et al. in order to help combat intruders. 

Dick et al., Schlossberg teach graphically displaying intrusion attempts detected 
by a firewall. They do not specifically mandate that the attempts may be seen via 
summary pages or pages for specific types of illicit access attempts. Official notice is 
taken that it is old and well-know to provide graphical user interfaces that give different 
viewing options for data, thereby giving users better ways to view and analyze data. As 
applied to the teaching of the above references, this should lead to greater security by 
individually showing different types of access blocks and a summary thereof. Different 
visual formats and tools are obvious, such as bar graphs and sliders. Therefore it would 
have been obvious to a person of ordinary skill in the art at the time the invention was 
made to improve the potential strength of a firewall by providing its operator with a 
comprehensive interface that includes a summary page as well as individual listings for 
different types of security threats, such as certain IP addresses or specific applications. 

5. Claims 2-12 and 21-23 have been amended by the latest amendment only so as 
to correct informalities. No new grounds of rejection have been necessitated by the 
latest amendment. Therefore the rejections of the claims have not changed and will not 
be repeated herein. Instead, they are hereby incorporated in their entirety by reference 
to the previous Office Action in the case. 



Conclusion 
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6. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. The following US Patent document teaches a user defined 
Graphical User Interface similar to that of the applicant. 

Krishnaswamy US 5,867,494 

7. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Paul E. Callahan whose telephone number is (571 ) 272- 
3869. The examiner can normally be reached on M-F from 9 to 5. 

If attempts to reach the examiner by telephone are unsuccessful, the Examiner's 
supervisor, Andrew Caldwell, can be reached on (571) 272-3868. The fax phone 
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number for the organization where this application or proceeding is assigned is: (703) 
872-9306. Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 305- 
3900. 

2/20/2005 

1 ^ ANDREW CALDWELL 

SUPERVISORY PATENT EXAMINER 



